diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ff4f96f..45d3764 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,6 @@ jobs:
       registry-server: ghcr.io
       registry-username: ${{ github.actor }}
       image: ${{ github.repository }}
-      version: 0.17.0
+      version: 0.18.0
     secrets:
       pull-request-token: ${{ secrets.GH_ORG_PAT }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5a79ea9..b37dc51 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -14,7 +14,7 @@ jobs:
     name: Integration Tests
     strategy:
       matrix:
-        k8s_version: [v1.27, v1.28, v1.29]
+        k8s_version: [v1.28, v1.29, v1.30]
     permissions:
       contents: read
     uses: kadras-io/github-reusable-workflows/.github/workflows/carvel-package-test-integration.yml@main
diff --git a/Makefile b/Makefile
index 5ba5c07..663175c 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,4 @@
-K8S_VERSION=v1.29
+K8S_VERSION=v1.30
 
 # Build package configuration
 build: package
diff --git a/README.md b/README.md
index a5fff02..2812543 100644
--- a/README.md
+++ b/README.md
@@ -12,7 +12,7 @@ A Carvel package for [secretgen-controller](https://github.com/carvel-dev/secret
 
 ### Prerequisites
 
-* Kubernetes 1.27+
+* Kubernetes 1.28+
 * Carvel [`kctrl`](https://carvel.dev/kapp-controller/docs/latest/install/#installing-kapp-controller-cli-kctrl) CLI.
 * Carvel [kapp-controller](https://carvel.dev/kapp-controller) deployed in your Kubernetes cluster. You can install it with Carvel [`kapp`](https://carvel.dev/kapp/docs/latest/install) (recommended choice) or `kubectl`.
 
diff --git a/package/config/upstream/release.yml b/package/config/upstream/release.yml
index 40e3cc7..7470433 100644
--- a/package/config/upstream/release.yml
+++ b/package/config/upstream/release.yml
@@ -801,11 +801,11 @@ metadata:
         - git:
             dirty: true
             remoteURL: https://github.com/carvel-dev/secretgen-controller
-            sha: 8b4e61a29dfd282f659ef1ffb96a779920260553
+            sha: 0dc3c44ea5c32b766140fa0d85e80b61d19e9029
             tags:
-            - v0.17.0
-        url: ghcr.io/carvel-dev/secretgen-controller@sha256:e1da9e311956ae4cbb8ca434d243c947e2d66770d06689da840ffc77988babdc
-    secretgen-controller.carvel.dev/version: v0.17.0
+            - v0.18.0
+        url: ghcr.io/carvel-dev/secretgen-controller@sha256:35060c30363c1806c137bd137edda0d1dd07442cf1372f1951b194b3b11f5b59
+    secretgen-controller.carvel.dev/version: v0.18.0
   name: secretgen-controller
   namespace: secretgen-controller
 spec:
@@ -820,7 +820,7 @@ spec:
         app: secretgen-controller
     spec:
       containers:
-      - image: ghcr.io/carvel-dev/secretgen-controller@sha256:e1da9e311956ae4cbb8ca434d243c947e2d66770d06689da840ffc77988babdc
+      - image: ghcr.io/carvel-dev/secretgen-controller@sha256:35060c30363c1806c137bd137edda0d1dd07442cf1372f1951b194b3b11f5b59
         name: secretgen-controller
         resources:
           requests:
@@ -833,6 +833,8 @@ spec:
             - ALL
           readOnlyRootFilesystem: true
           runAsNonRoot: true
+          seccompProfile:
+            type: RuntimeDefault
       serviceAccount: secretgen-controller-sa
 ---
 apiVersion: v1
diff --git a/package/vendir.lock.yml b/package/vendir.lock.yml
index 3f43449..a751924 100644
--- a/package/vendir.lock.yml
+++ b/package/vendir.lock.yml
@@ -2,8 +2,8 @@ apiVersion: vendir.k14s.io/v1alpha1
 directories:
 - contents:
   - githubRelease:
-      tag: v0.17.0
-      url: https://api.github.com/repos/carvel-dev/secretgen-controller/releases/138771550
+      tag: v0.18.0
+      url: https://api.github.com/repos/carvel-dev/secretgen-controller/releases/153293085
     path: .
   path: config/upstream
 kind: LockConfig
diff --git a/package/vendir.yml b/package/vendir.yml
index 9e643de..d2ab7cb 100755
--- a/package/vendir.yml
+++ b/package/vendir.yml
@@ -4,7 +4,7 @@ directories:
   - githubRelease:
       disableAutoChecksumValidation: true
       slug: carvel-dev/secretgen-controller
-      tag: v0.17.0
+      tag: v0.18.0
     includePaths:
     - release.yml
     path: .
diff --git a/test/setup/kind/v1.28/kind-config.yml b/test/setup/kind/v1.28/kind-config.yml
index 8c67fca..88636af 100644
--- a/test/setup/kind/v1.28/kind-config.yml
+++ b/test/setup/kind/v1.28/kind-config.yml
@@ -3,6 +3,6 @@ kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
 nodes:
 - role: control-plane
-  image: kindest/node:v1.28.7
+  image: kindest/node:v1.28.9
 - role: worker
-  image: kindest/node:v1.28.7
+  image: kindest/node:v1.28.9
diff --git a/test/setup/kind/v1.29/kind-config.yml b/test/setup/kind/v1.29/kind-config.yml
index 8dea726..1284fef 100644
--- a/test/setup/kind/v1.29/kind-config.yml
+++ b/test/setup/kind/v1.29/kind-config.yml
@@ -3,6 +3,6 @@ kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
 nodes:
 - role: control-plane
-  image: kindest/node:v1.29.2
+  image: kindest/node:v1.29.4
 - role: worker
-  image: kindest/node:v1.29.2
+  image: kindest/node:v1.29.4
diff --git a/test/setup/kind/v1.27/kind-config.yml b/test/setup/kind/v1.30/kind-config.yml
similarity index 61%
rename from test/setup/kind/v1.27/kind-config.yml
rename to test/setup/kind/v1.30/kind-config.yml
index 36a8d8a..a477444 100644
--- a/test/setup/kind/v1.27/kind-config.yml
+++ b/test/setup/kind/v1.30/kind-config.yml
@@ -3,6 +3,6 @@ kind: Cluster
 apiVersion: kind.x-k8s.io/v1alpha4
 nodes:
 - role: control-plane
-  image: kindest/node:v1.27.11
+  image: kindest/node:v1.30.0
 - role: worker
-  image: kindest/node:v1.27.11
+  image: kindest/node:v1.30.0